From owner-freebsd-stable@FreeBSD.ORG Fri Feb 24 23:24:26 2012 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 58CC61065672 for ; Fri, 24 Feb 2012 23:24:26 +0000 (UTC) (envelope-from dudu@dudu.ro) Received: from mail-ee0-f54.google.com (mail-ee0-f54.google.com [74.125.83.54]) by mx1.freebsd.org (Postfix) with ESMTP id CD93E8FC0A for ; Fri, 24 Feb 2012 23:24:25 +0000 (UTC) Received: by eekd17 with SMTP id d17so465583eek.13 for ; Fri, 24 Feb 2012 15:24:25 -0800 (PST) Received-SPF: pass (google.com: domain of dudu@dudu.ro designates 10.14.47.8 as permitted sender) client-ip=10.14.47.8; Authentication-Results: mr.google.com; spf=pass (google.com: domain of dudu@dudu.ro designates 10.14.47.8 as permitted sender) smtp.mail=dudu@dudu.ro; dkim=pass header.i=dudu@dudu.ro Received: from mr.google.com ([10.14.47.8]) by 10.14.47.8 with SMTP id s8mr2642076eeb.91.1330125864995 (num_hops = 1); Fri, 24 Feb 2012 15:24:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dudu.ro; s=google; h=date:from:to:cc:message-id:in-reply-to:references:subject:x-mailer :mime-version:content-type:content-transfer-encoding :content-disposition; bh=1L6bxMoVOXloylnpId7w5lHOgIrhTzQsrrSu19bpBDs=; b=h1a1AKEvR305LITCYyeBz7uloZQnxV3VbMRIHCjLbJVgorMlc0e1GAo9Qkcdk0bF3t RLBt0kTSAu6HsrgXxgfN6aYZb6/iIZ3Nw2lLWgx5cZRtklNPwAVyL/iQdk843QE9Y6nf sfZok6S9I1P1CttJBvqd7dyr/HaieUTznmUGA= Received: by 10.14.47.8 with SMTP id s8mr1962785eeb.91.1330125864788; Fri, 24 Feb 2012 15:24:24 -0800 (PST) Received: from LesPaul.local ([82.76.253.74]) by mx.google.com with ESMTPS id u9sm23733811eem.11.2012.02.24.15.24.22 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 24 Feb 2012 15:24:23 -0800 (PST) Date: Fri, 24 Feb 2012 23:24:20 +0000 From: Vlad Galu To: Ed Schouten Message-ID: <74553B7DA41D44179CAC5A937E6322E6@dudu.ro> In-Reply-To: <20120224230027.GJ32748@hoeg.nl> References: <20120224221526.GH32748@hoeg.nl> <350DE43596674E608581BB2536231611@dudu.ro> <20120224224016.GI32748@hoeg.nl> <9DAEF77AE05F4151AD561D26DF5D69F1@dudu.ro> <20120224230027.GJ32748@hoeg.nl> X-Mailer: sparrow 1.5 (build 1043.1) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Gm-Message-State: ALoCoQnpdQZR0XYrBDK+yYInWZ/bpEMLjE+AAlGXmrAUJR5I1w2oss3wO9yTuHUnnOmU1f6lOYnv Cc: stable@freebsd.org Subject: Re: Inconsistent utx.active? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Feb 2012 23:24:26 -0000 On Friday, February 24, 2012 at 11:00 PM, Ed Schouten wrote: > Hello Vlad, > > * Vlad Galu , 20120224 23:54: > > [1330014380.652067 -- Thu Feb 23 17:26:20 2012] user process: id="4f86d023f250d3c9" pid="39012" user="dudu" line="pts/0" host="A.B.C.D" > > [1330014398.177818 -- Thu Feb 23 17:26:38 2012] user process: id="269d75b37f295346" pid="39221" user="dudu" line="pts/1" host="A.B.C.D" > > [1330085459.796787 -- Fri Feb 24 13:10:59 2012] user process: id="d026e8e5c0648ec2" pid="38093" user="dudu" line="pts/0" host="A.B.C.D" > > [1330122640.813570 -- Fri Feb 24 23:30:40 2012] user process: id="dd8d3dff2f3002a0" pid="82959" user="dudu" line="pts/0" host="X.Y.Z.T" > > [1330122493.638088 -- Fri Feb 24 23:28:13 2012] user process: id="92b73279a543d99f" pid="73085" user="dudu" line="pts/1" host="X.Y.Z.T" > > [1330122498.444614 -- Fri Feb 24 23:28:18 2012] user process: id="c0f3c404a3ca8565" pid="73573" user="dudu" line="pts/2" host="X.Y.Z.T" > > [1330122634.538515 -- Fri Feb 24 23:30:34 2012] dead process: id="fea56df5dde26e4d" pid="76338" > > > > You mentioned in a previous email that these entries belong to SSH > sessions. Are you sure about this? The identifiers seem to contain > randomly generated data, just like pam_lastlog(8) does. OpenSSH uses > identifiers based on the TTY name, like so: > > > [1330124273.955165 -- Fri Feb 24 23:57:53 2012] user process: id="7074732f30000000" pid="15880" user="ed" line="pts/0" host="m.fxq.nl (http://m.fxq.nl)" > > 0x7074732f30 is equal to "pts/0". > > Maybe they're generated by some different login service or you've > configured PAM/OpenSSH/etc. in a non-default way? > Sigh, you are right. I had UseLogin set to yes in sshd_config. Sorry for the noise and thanks!